Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: PGgbe7UTS4iQUmaBucTC6787xOQWLN2px5pMW0o2YWo=
Subject key identifier: AD:FA:C3:C8:06:84:FB:F7:75:3E:D4:6B:92:FB:0D:14:58:D1:25:04
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 019A725C5A84EC8D130555B804113D009504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 0437
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: 2Oj+iv6d4xeAwHAowleqeoznqWIj80y5KVgd8FiPOac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5a:84:ec:8d:13:05:55:b8:04:11:3d:00:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=adfac3c80684fbf7753ed46b92fb0d1458d12504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:ed:2e:c0:8d:e3:38:ae:cb:a5:1e:5f:b1:
c9:b7:ff:20:b2:7c:49:69:17:c6:b6:7f:50:94:01:
0b:a9:c5:9a:e1:0f:a6:34:26:be:f7:25:4f:65:cb:
ef:34:22:6f:9e:18:3a:ec:35:39:3c:66:fb:c6:fb:
c2:e2:ff:33:ca:fe:3a:ec:e9:24:cd:e9:5e:9d:4e:
7f:9f:f1:c2:a4:bb:91:31:f5:2f:14:64:80:f1:02:
44:1a:41:8a:aa:75:aa:10:5e:b4:72:a6:76:95:40:
af:d3:5c:0c:7f:e5:c8:67:ce:50:17:d8:90:47:5b:
43:56:06:00:c8:96:63:e6:fe:79:5c:59:62:b1:3e:
fe:b0:99:29:f6:8c:cf:0e:5a:fc:12:d3:01:c9:95:
42:15:0b:b8:74:ee:bc:d8:a4:95:4e:72:33:4f:19:
e7:c2:1a:0b:1f:a3:bb:62:c2:a5:ff:0c:34:88:1c:
a2:3b:8c:6d:44:b7:75:b4:f1:17:60:97:e4:77:29:
25:32:0c:ff:e5:a3:e8:9d:a9:50:61:a3:d7:20:cd:
18:19:b8:a5:ff:ec:b2:4e:86:f5:39:50:81:23:0e:
89:e5:d3:b7:2a:7c:3b:eb:6d:71:1f:5d:83:fd:27:
38:b2:22:97:fe:1f:2b:b7:3a:65:e2:b0:c8:b1:6d:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FA:C3:C8:06:84:FB:F7:75:3E:D4:6B:92:FB:0D:14:58:D1:25:04
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:17:0b:45:47:62:4a:60:69:68:83:a9:4e:33:20:c8:0f:e8:
ad:ff:3e:4f:3a:35:44:ac:dd:02:de:b1:d2:d0:4b:23:10:cd:
c1:b2:87:8e:e9:2e:3c:24:20:c6:6a:ab:73:71:79:44:52:53:
b6:95:b2:28:c6:cb:c4:c1:5d:d1:19:58:32:50:8d:f4:08:d3:
c6:7b:a9:35:ef:84:de:7b:24:1d:de:3f:2a:dd:83:89:bc:1e:
9b:da:22:66:5f:c8:b5:dd:a7:68:b7:2a:ea:83:83:d4:04:21:
af:a2:d0:0e:5a:e8:13:db:b8:34:77:ee:7a:04:c2:27:00:61:
b4:78:3b:85:4f:da:21:7c:24:21:e1:04:43:f1:bc:ea:f1:3d:
52:3e:46:35:6b:02:22:d9:dc:f6:e6:31:29:e5:96:21:5b:92:
0b:23:50:64:cd:f4:0c:d6:c5:5a:f2:ba:8d:29:33:a3:ee:c0:
d7:ac:0c:3f:03:22:5d:c9:a6:96:9c:78:89:bb:a3:9f:c3:87:
c9:92:05:c6:9c:ef:de:07:7d:f4:a3:d0:b5:d7:bd:e3:e6:32:
a7:78:5c:b5:74:4d:29:5f:92:f3:5c:99:85:79:bc:07:cc:70:
3e:26:c9:2d:e3:63:0d:99:09:9e:62:f2:12:0a:58:03:55:5b:
c0:76:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:30 2025 by rpki-client